Privacy policy

1. Scope

This policy applies to personal information that Palisade Insights (“we”, “us”) collects through palisadeinsights.ca, through email and other correspondence with us, and in the course of providing our advisory services.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). By using this website or contacting us, you consent to the practices described here.

Our website may link to other sites. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

2. Information we collect

We collect only what we need to respond to you and to provide our services:

• Contact details you give us, such as your name, organization, email address and phone number.
• The content of your enquiry and any later correspondence.
• Technical information that browsers send automatically, such as IP address, browser type, device type and the pages requested. Our hosting provider processes this to deliver and secure the site.

Please do not send sensitive or classified information through the website form or by unencrypted email. If an engagement requires it, we will agree a secure method with you.

3. How we collect it

• Directly from you, when you complete our enquiry form, email us or speak with us.
• Automatically, through the standard technical operation of the website and its security services.
• From your organization, when it engages us and shares contact details for the people we will work with.

We do not buy personal information, and we do not send marketing email.

4. Cookies and similar technologies

We do not use advertising or cross-site tracking cookies, and we do not run analytics that profile individual visitors.

Our hosting and security provider may set strictly necessary cookies to protect the site from abuse and bots. Our enquiry form may use a privacy-focused bot check that runs in the background. The site also loads typefaces from Google Fonts, which receives your IP address when the fonts are requested.

You can block or delete cookies in your browser settings. Blocking security cookies may prevent the enquiry form from working.

5. How we use information

We use personal information to:

• respond to enquiries and arrange briefings;
• provide, manage and invoice our services;
• operate, secure and improve the website;
• meet our legal, regulatory and professional obligations.

We will not use your information for a new purpose without first asking for your consent, unless the law permits or requires it.

6. When we share information

We do not sell or rent personal information. We share it only:

• With service providers that support our operations, such as website hosting and security (Cloudflare), delivery of website enquiries to our inbox (Resend), and email and document services (Google Workspace). They may use the information only to provide those services to us, under contractual confidentiality and security obligations.
• When required by law, for example to comply with a court order or a lawful request from authorities, or to protect our rights or the safety of others.
• In a business transaction, such as a merger or sale, where the receiving party agrees to protect the information under this policy.

7. Storage outside Canada

Some of our service providers store or process information outside Canada, including in the United States. While it is there, it may be accessible to courts, law enforcement and national security authorities in that jurisdiction. We choose providers that maintain strong security and contractual privacy protections.

8. Security

We protect personal information with physical, organizational and technical safeguards appropriate to its sensitivity. These include encrypted connections to the website, access restricted to people who need it, and multi-factor authentication on our systems.

No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

9. Retention

We keep personal information only as long as needed for the purposes above, or as required by law. Enquiries that do not lead to an engagement are deleted when they are no longer needed. When information is no longer required, we securely delete or anonymize it.

10. Access and correction

You may ask to see the personal information we hold about you and ask us to correct anything that is inaccurate or incomplete. We will respond within 30 days. In limited cases the law allows or requires us to refuse access, for example where disclosure would reveal information about another person. If so, we will explain why.

11. Withdrawing consent

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to respond to you or to provide our services. We will explain the effect when you contact us.

12. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date it was last updated. If we make a significant change to how we handle personal information, we will make that clear here.

13. Contact and complaints

For questions, access or correction requests, or to withdraw consent, contact our privacy contact:

We investigate every complaint. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.